CVE-2019-19272

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
References
Link Resource
https://github.com/proftpd/proftpd/issues/858 Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*

Information

Published : 2019-11-25 20:15

Updated : 2019-12-11 08:16


NVD link : CVE-2019-19272

Mitre link : CVE-2019-19272


JSON object : View

CWE
CWE-476

NULL Pointer Dereference

Advertisement

dedicated server usa

Products Affected

proftpd

  • proftpd